Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.4The Feeds for YouTube (YouTube video, channel, and gallery plugin) WordPress plugin before 2.6.4 is vulnerable to unauthorized modification of the Feeds for YouTube (Y…CVE-2026-1631 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 18, 2026
Medium4.3The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability…CVE-2025-4202 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%May 16, 2026
Medium5.3The Essential Chat Support plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.1.CVE-2026-8681 · CVE.org · NIST NVD · WordPressMay 16, 2026
Medium6.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-45667 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
High7.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-45350 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
Medium6.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-44571 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
High7.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-44569 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
High7.2Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-45395 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
High7.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-45399 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
Medium5.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-44563 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
Medium6.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-44562 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
Medium6.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-44560 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-44559 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
Medium5.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-44558 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
High7.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-44556 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
High7.6Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-44555 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
High8.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-44554 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
Medium5.0Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.CVE-2026-44550 · openwebui · open webui · CVE.org · NIST NVDMay 15, 2026
Medium5.3phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/{tagId} endpoint that allows any authenticated user to delete tags.CVE-2026-46365 · CVE.org · NIST NVDMay 15, 2026
Medium5.3phpMyFAQ before 4.1.2 contains missing permission checks in ConfigurationTabController.php where 12 endpoints use userIsAuthenticated() instead of userHasPermission(CO…CVE-2026-45007 · CVE.org · NIST NVDMay 15, 2026
Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.CVE-2026-44719 · CVE.org · NIST NVD · PostgreSQLMay 15, 2026
Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.CVE-2026-44718 · CVE.org · NIST NVD · PostgreSQLMay 15, 2026
Critical10.0An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthenticate…CVE-2026-2031 · CVE.org · NIST NVDMay 15, 2026
Medium4.3The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access in all versions up to, and inc…CVE-2026-7563 · CVE.org · NIST NVD · WordPressMay 15, 2026
Medium6.5The Smartcat Translator for WPML plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'routeData' REST endp…CVE-2026-4683 · CVE.org · NIST NVD · WordPressMay 15, 2026